.png){kind=logo}
SY0-601.AB1
Security+ (SY0-601): Full Exam Prep for Cybersecurity & Risk Management
Prepare for the CompTIA Security+ SY0-601 exam. Master the critical skills to defend against cyber attacks and get an industry-leading credential.
- Practice in 64 Hands-On Labs — nothing to install
- 37 Interactive Lessons and 301 topics mapped to the official exam objectives
- 422 Practice Test Questions and 2 Full Length Tests
Intermediate Self-paced · 1 year access 4.6/5 (238 Reviews)
64 Hands-On LiveLabs
Practice real IT tasks in guided environments.
- Real environments
- Auto-graded
- No installation
37Interactive Lessons
301Topics
64LiveLab
422Practice Test Questions
791Flashcards
791Glossary of terms
01 / Skills you'll get
What you will be able to do
Try Free →
No credit card required
Cybersecurity threats are more frequent, more advanced, and more damaging than ever. As the first line of defence, security professionals must be prepared and continuously upskill.
This online course prepares you for the CompTIA Security+ (SY0-601) exam. It gives you the practical skills to protect systems, data, and networks in today’s threat landscape.
You’ll learn how to identify and defend against attacks, secure apps and cloud environments, implement access controls, manage risk, and handle incident response. With hands-on labs, you’ll gain practical experience, which is beneficial to land a security-focused role.
- Comparing & contrasting different types of social engineering techniques
- Analyzing & understanding any potential indicators to determine the type of attacks
- Understanding different types of threats, actors, vectors, & intelligence sources
- Simplifying the techniques used in security assessment & penetration assessments
- Execute response plans, conduct forensics investigations, and apply tools to preserve, analyze, and recover digital evidence
- Manage authentication, authorization, and user access with methods like MFA, AAA, and secure account controls
- Explore and execute cybersecurity solutions for the cloud
Course Highlights
-
37 Structured Lessons Comprehensive coverage of core course objectives
-
64 Hands-On LiveLabs Interactive guided scenarios with instant evaluation
-
422 Practice Questions Assessment tests with detailed answer rationales
-
1 Year Full Access Self-paced learning accessible anytime on all devices
02 / Lessons & labs
See exactly what you will learn and practice
Lessons
37 Interactive Lessons · 301 topics01 Introduction 3 topics +
- Goals and Methods
- Who Should Read This Course?
- CompTIA Security+ Exam Topics
02 Comparing and Contrasting Different Types of Social Engineering Techniques 3 topics · 2 LiveLab +
- Social Engineering Fundamentals
- User Security Awareness Education
- Review Key Topics
2 LiveLab in this lesson — see the labs panel →
03 Analyzing Potential Indicators to Determine the Type of Attack 8 topics · 6 LiveLab +
- Malicious Software (Malware)
- Password Attacks
- Physical Attacks
- Adversarial Artificial Intelligence
- Supply-Chain Attacks
- Cloud-based vs. On-premises Attacks
- Cryptographic Attacks
- Review Key Topics
6 LiveLab in this lesson — see the labs panel →
04 Analyzing Potential Indicators Associated with Application Attacks 18 topics · 3 LiveLab +
- Privilege Escalation
- Cross-Site Scripting (XSS) Attacks
- Injection Attacks
- Pointer/Object Dereference
- Directory Traversal
- Buffer Overflows
- Race Conditions
- Error Handling
- Improper Input Handling
- Replay Attacks
- Request Forgeries
- Application Programming Interface (API) Attacks
- Resource Exhaustion
- Memory Leaks
- Secure Socket Layer (SSL) Stripping
- Driver Manipulation
- Pass the Hash
- Review Key Topics
3 LiveLab in this lesson — see the labs panel →
05 Analyzing Potential Indicators Associated with Network Attacks 7 topics · 1 LiveLab +
- Wireless Attacks
- On-Path Attacks
- Layer 2 Attacks
- Domain Name System (DNS) Attacks
- Distributed Denial-of-Service (DDoS) Attacks
- Malicious Code or Script Execution Attacks
- Review Key Topics
1 LiveLab in this lesson — see the labs panel →
06 Understanding Different Threat Actors, Vectors, and Intelligence Sources 6 topics +
- Actors and Threats
- Attributes of Threat Actors
- Attack Vectors
- Threat Intelligence and Threat Intelligence Sources
- Research Sources
- Review Key Topics
07 Understanding the Security Concerns Associated with Various Types of Vulnerabilities 8 topics +
- Cloud-based vs. On-premises Vulnerabilities
- Zero-day Vulnerabilities
- Weak Configurations
- Third-party Risks
- Improper or Weak Patch Management
- Legacy Platforms
- The Impact of Cybersecurity Attacks and Breaches
- Review Key Topics
08 Summarizing the Techniques Used in Security Assessments 5 topics +
- Threat Hunting
- Vulnerability Scans
- Logs and Security Information and Event Management (SIEM)
- Security Orchestration, Automation, and Response (SOAR)
- Review Key Topics
09 Understanding the Techniques Used in Penetration Testing 4 topics · 2 LiveLab +
- Penetration Testing
- Passive and Active Reconnaissance
- Exercise Types
- Review Key Topics
2 LiveLab in this lesson — see the labs panel →
10 Understanding the Importance of Security Concepts in an Enterprise Environment 5 topics · 1 LiveLab +
- Configuration Management
- Data Sovereignty and Data Protection
- Site Resiliency
- Deception and Disruption
- Review Key Topics
1 LiveLab in this lesson — see the labs panel →
11 Summarizing Virtualization and Cloud Computing Concepts 5 topics +
- Cloud Models
- Cloud Service Providers
- Cloud Architecture Components
- Virtual Machine (VM) Sprawl Avoidance and VM Escape Protection
- Review Key Topics
12 Summarizing Secure Application Development, Deployment, and Automation Concepts 9 topics +
- Software Development Environments and Methodologies
- Application Provisioning and Deprovisioning
- Software Integrity Measurement
- Secure Coding Techniques
- Open Web Application Security Project (OWASP)
- Software Diversity
- Automation/Scripting
- Elasticity and Scalability
- Review Key Topics
13 Summarizing Authentication and Authorization Design Concepts 6 topics +
- Authentication Methods
- Biometrics
- Multifactor Authentication (MFA) Factors and Attributes
- Authentication, Authorization, and Accounting (AAA)
- Cloud vs. On-premises Requirements
- Review Key Topics
14 Implementing Cybersecurity Resilience 9 topics · 3 LiveLab +
- Redundancy
- Replication
- On-premises vs. Cloud
- Backup Types
- Non-persistence
- High Availability
- Restoration Order
- Diversity
- Review Key Topics
3 LiveLab in this lesson — see the labs panel →
15 Understanding the Security Implications of Embedded and Specialized Systems 14 topics +
- Embedded Systems
- Supervisory Control and Data Acquisition (SCADA)/Industrial Control Systems (ICS)
- Internet of Things (IoT)
- Specialized Systems
- Voice over IP (VoIP)
- Heating, Ventilation, and Air Conditioning (HVAC)
- Drones
- Multifunction Printers (MFP)
- Real-Time Operating Systems (RTOS)
- Surveillance Systems
- System on a Chip (SoC)
- Communication Considerations
- Embedded System Constraints
- Review Key Topics
16 Understanding the Importance of Physical Security Controls 24 topics +
- Bollards/Barricades
- Access Control Vestibules
- Badges
- Alarms
- Signage
- Cameras
- Closed-Circuit Television (CCTV)
- Industrial Camouflage
- Personnel
- Locks
- USB Data Blockers
- Lighting
- Fencing
- Fire Suppression
- Sensors
- Drones
- Visitor Logs
- Faraday Cages
- Air Gap
- Screened Subnet (Previously Known as Demilitarized Zone [DMZ])
- Protected Cable Distribution
- Secure Areas
- Secure Data Destruction
- Review Key Topics
17 Summarizing the Basics of Cryptographic Concepts 21 topics · 4 LiveLab +
- Digital Signatures
- Key Length
- Key Stretching
- Salting
- Hashing
- Key Exchange
- Elliptic-Curve Cryptography
- Perfect Forward Secrecy
- Quantum
- Post-Quantum
- Ephemeral
- Modes of Operation
- Blockchain
- Cipher Suites
- Symmetric vs. Asymmetric Encryption
- Lightweight Cryptography
- Steganography
- Homomorphic Encryption
- Common Use Cases
- Limitations
- Review Key Topics
4 LiveLab in this lesson — see the labs panel →
18 Implementing Secure Protocols 3 topics · 3 LiveLab +
- Protocols
- Use Cases
- Review Key Topics
3 LiveLab in this lesson — see the labs panel →
19 Implementing Host or Application Security Solutions 15 topics · 2 LiveLab +
- Endpoint Protection
- Antimalware
- Next-Generation Firewall
- Host-based Intrusion Prevention System
- Host-based Intrusion Detection System
- Host-based Firewall
- Boot Integrity
- Database
- Application Security
- Hardening
- Self-Encrypting Drive/Full-Disk Encryption
- Hardware Root of Trust
- Trusted Platform Module
- Sandboxing
- Review Key Topics
2 LiveLab in this lesson — see the labs panel →
20 Implementing Secure Network Designs 16 topics · 11 LiveLab +
- Load Balancing
- Network Segmentation
- Virtual Private Network
- DNS
- Network Access Control
- Out-of-Band Management
- Port Security
- Network Appliances
- Access Control List
- Route Security
- Quality of Service
- Implications of IPv6
- Port Spanning/Port Mirroring
- Monitoring Services
- File Integrity Monitors
- Review Key Topics
11 LiveLab in this lesson — see the labs panel →
21 Installing and Configuring Wireless Security Settings 5 topics +
- Cryptographic Protocols
- Authentication Protocols
- Methods
- Installation Considerations
- Review Key Topics
22 Implementing Secure Mobile Solutions 6 topics · 2 LiveLab +
- Connection Methods and Receivers
- Mobile Device Management
- Mobile Device Management Enforcement and Monitoring
- Mobile Devices
- Deployment Models
- Review Key Topics
2 LiveLab in this lesson — see the labs panel →
23 Applying Cybersecurity Solutions to the Cloud 4 topics · 1 LiveLab +
- Cloud Security Controls
- Solutions
- Cloud Native Controls vs. Third-Party Solutions
- Review Key Topics
1 LiveLab in this lesson — see the labs panel →
24 Implementing Identity and Account Management Controls 4 topics · 3 LiveLab +
- Identity
- Account Types
- Account Policies
- Review Key Topics
3 LiveLab in this lesson — see the labs panel →
25 Implementing Authentication and Authorization Solutions 4 topics · 1 LiveLab +
- Authentication Management
- Authentication/Authorization
- Access Control Schemes
- Review Key Topics
1 LiveLab in this lesson — see the labs panel →
26 Implementing Public Key Infrastructure 5 topics · 2 LiveLab +
- Public Key Infrastructure
- Types of Certificates
- Certificate Formats
- PKI Concepts
- Review Key Topics
2 LiveLab in this lesson — see the labs panel →
27 Using the Appropriate Tool to Assess Organizational Security 9 topics · 13 LiveLab +
- Network Reconnaissance and Discovery
- File Manipulation
- Shell and Script Environments
- Packet Capture and Replay
- Forensics
- Exploitation Frameworks
- Password Crackers
- Data Sanitization
- Review Key Topics
13 LiveLab in this lesson — see the labs panel →
28 Summarizing the Importance of Policies, Processes, and Procedures for Incident Response 12 topics +
- Incident Response Plans
- Incident Response Process
- Exercises
- Attack Frameworks
- Stakeholder Management
- Communication Plan
- Disaster Recovery Plan
- Business Continuity Plan
- Continuity of Operations Planning (COOP)
- Incident Response Team
- Retention Policies
- Review Key Topics
29 Using Appropriate Data Sources to Support an Investigation 11 topics · 2 LiveLab +
- Vulnerability Scan Output
- SIEM Dashboards
- Log Files
- syslog/rsyslog/syslog-ng
- journalctl
- NXLog
- Bandwidth Monitors
- Metadata
- NetFlow/sFlow
- Protocol Analyzer Output
- Review Key Topics
2 LiveLab in this lesson — see the labs panel →
30 Applying Mitigation Techniques or Controls to Secure an Environment 7 topics +
- Reconfigure Endpoint Security Solutions
- Configuration Changes
- Isolation
- Containment
- Segmentation
- SOAR
- Review Key Topics
31 Understanding the Key Aspects of Digital Forensics 10 topics · 2 LiveLab +
- Documentation/Evidence
- Acquisition
- On-premises vs. Cloud
- Integrity
- Preservation
- E-discovery
- Data Recovery
- Nonrepudiation
- Strategic Intelligence/Counterintelligence
- Review Key Topics
2 LiveLab in this lesson — see the labs panel →
32 Comparing and contrasting the Various Types of Controls 3 topics +
- Control Category
- Control Types
- Review Key Topics
33 Understanding the Importance of Applicable Regul...orks That Impact Organizational Security Posture 4 topics +
- Regulations, Standards, and Legislation
- Key Frameworks
- Benchmarks and Secure Configuration Guides
- Review Key Topics
34 Understanding the Importance of Policies to Organizational Security 7 topics +
- Personnel Policies
- Diversity of Training Techniques
- Third-Party Risk Management
- Data Concepts
- Credential Policies
- Organizational Policies
- Review Key Topics
35 Summarizing Risk Management Processes and Concepts 6 topics +
- Risk Types
- Risk Management Strategies
- Risk Analysis
- Disaster Analysis
- Business Impact Analysis
- Review Key Topics
36 Understanding Privacy and Sensitive Data Concepts in Relation to Security 12 topics +
- Organizational Consequences of Privacy and Data Breaches
- Notifications of Breaches
- Data Types and Asset Classification
- PII
- PHI
- Privacy Enhancing Technologies
- Roles and Responsibilities
- Information Lifecycle
- Impact Assessment
- Terms of Agreement
- Privacy Notice
- Review Key Topics
37 Final Preparation 3 topics +
- Hands-on Activities
- Suggested Plan for Final Review and Study
- Summary
Hands-On Labs Our edge
64 LiveLabs- Using SET
- Performing Website Reconnaissance
- Cracking a Password Using the John the Ripper Tool
- Simulating a DoS Attack
- Using Rainbow Tables
- Detecting Rootkits
- Creating a Remote Access Trojan (RAT)
- Using NetBus in Windows 10
- Defending Against a Buffer Overflow Attack
- Performing Session Hijacking Using Burp Suite
- Exploiting a Website Using SQL Injection
- Performing ARP Spoofing
- Identifying Search Options in Metasploit
- Using OWASP ZAP
- Setting Up a Honeypot
- Configuring RAID 5
- Taking an Incremental Backup
- Taking a Full Backup
- Observing an MD5-Generated Hash Value
- Performing Symmetric Encryption
- Examining Asymmetric Encryption
- Hiding Text Using Steganography
- Configuring an SSH Server
- Configuring DNSSEC on an Active Directory Integrated Zone
- Configuring IPSec
- Configuring Inbound Rules for a Firewall
- Using Windows Firewall
- Configuring a Tunnel Group for Clientless SSL VPN
- Configuring Clientless SSL VPNs on ASA
- Configuring a Site-to-Site IPsec VPN Topology
- Performing IDS Configuration with Snort
- Using Performance Monitor
- Creating a VLAN and Viewing its Assignment to Port Mapping
- Creating a DMZ Zone
- Setting Up a VPN Server with Windows Server 2016
- Implementing Port Security
- Configuring a BPDU Guard on a Switch Port
- Configuring NetFlow and NetFlow Data Export
- Turning on Airplane Mode of an iPhone
- Setting Up a VPN in Android
- Performing a MITM Attack
- Stopping Permissions Inheritance
- Managing NTFS Permissions
- Creating a User Account in the Active Directory
- Creating a Network Policy for 802.1X
- Revoking and Exporting a Certificate
- Examining PKI Certificates
- Performing Memory Analysis with Volatility
- Using Wireshark
- Manipulating a File in Linux
- Conducting Vulnerability Scanning Using Nessus
- Using the theHarvester Tool
- Creating Reverse and Bind Shells Using Netcat
- Using the netstat Command
- Using the hping Program
- Using pathping and ping Commands
- Scanning Live Systems Using Nmap
- Using dig and nslookup Commands
- Tracing a Route Using Tracert
- Using the ifconfig Command
- Viewing the System Logs
- Using Windows Event Viewer
- Completing the Chain of Custody
- Analyzing Forensics with Autopsy
Labs run in your browser — nothing to install.
03 / Exam details
Security+ (SY0-601): Full Exam Prep for Cybersecurity & Risk Management Details
Gain hands-on experience to pass the CompTIA Security+ certification exam with the CompTIA Security+ (SY0-601) course and lab. Interactive chapters and hands-on labs comprehensively cover the SY0-601 exam objectives and provide knowledge in areas such as security concepts, operating systems, application systems, and many more. The CompTIA Security+ study guide will help you get a full understanding of the challenges you'll face as a security professional.
Questions
90
(per exam)
Duration
90 minutes
(per exam)
Passing Score
750
(on a scale of 900)
Exam Fee
USD 370
(per exam)
Question Format
Multiple choice and performance-based questions
single/multiple choice, performance-based
Practice Tests
422 Practice Questions
(mapped to official exam objectives)
Certification
SY0-601.AB1
CompTIA credential
Ready to take the exam?
Add your official SY0-601.AB1 exam voucher to your order.
Official Voucher · Fast delivery · Retake bundle available
Exam voucher is sold separately and not included with standard course.
04 / FAQs
Questions before you start
Who should take the Security+ + SY0-601 exam?+
The Security+ SY0-601 exam was specifically designed for IT professionals with some security experience who want to begin their careers in the world of cybersecurity.
Are there any prerequisites for this course?+
No, the CompTIA Security+ (SY0-601) certification does not have any mandatory prerequisites.
How will this course help me in my cybersecurity career?+
The CompTIA Security+ (SY0-601) course does help those individuals prepare for & pass the security exam & validate their IT security skills.
What are the prerequisites for this exam?+
CompTIA Security+ and two years of experience in IT administration with a focus on security.
What is the exam registration fee?+
USD 370
How many questions are asked in the exam?+
The exam contains 90 questions.
What is the duration of the exam?+
90 minutes
What is the passing score?+
750
(on a scale of 100-900)
What is the exam's retake policy?+
In the event that you fail your first attempt at passing the SY0-601 examination, CompTIA retake policy is:
- CompTIA does not require a waiting period between the first and second attempts to pass such an examination. However, if you need a third or subsequent attempt to pass the examination, you shall be required to wait for a period of at least fourteen calendar days from the date of your last attempt before you can retake the exam.
- If a candidate has passed an exam, he/she cannot take it again without prior consent from CompTIA.
- A test result found to be in violation of the retake policy will not be processed, which will result in no credit awarded for the test taken. Repeat violators will be banned from participation in the CompTIA Certification Program.
- Candidates must pay the exam price each time they attempt the exam. CompTIA does not offer free re-tests or discounts on retakes.
What is the validity of the certification?+
Three years
Secure the Future, Secure the World
Become the solution in the world of cybersecurity with CompTIA Security + SY0-601.
- 1 year of full access
- 64 LiveLab included
- Certificate of completion
No credit card required